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DESCRIPTION 
INFORMATION RECORDING/PLAYBACK SYSTEM 
Technical Field 

The present invention relates to an information recording/playback system 
which prevents illegal copying of recording media, and to an information recording 
apparatus, an information playback apparatus, an authentication data recording 
apparatus, an authentication processing apparatus, an information recording/playback 
method, an information recording method, an information playback method, an 
authentication data recording method, an information-recording-medium 
authentication method, and an information recording medium. 

Background Art 

In recent years, apparatuses for transmitting and recording digital data such as 
music information and video information have come to be widely used in households. 
Since data can be recorded and read with high quality in these apparatuses, it is 
possible to construct a recording system in which there is no deterioration in quality 
even if copying is performed repeatedly. Such a recording system must include a 
copyright protection function to prevent copyrighted data from being illegally copied. 

As such a system for the protection of copyright, for example, there is a content 



2 

scrambling system in a digital video disc (DVD) ROM. 

In this system, all copyrighted data on a disk is encrypted and only an apparatus 
which has received a license is given an encryption key for obtaining meaningful data 
by decrypting encrypted data. The licensed apparatus is designed to conform with 
operation specifications so that illegal copying may not be performed. 

However, the method employed in a DVD system such as that described above 
is effective for ROM media, but it is not effective for RAM media in which data can 
be recorded by a user. The reason for this is that, in RAM media, although an 
unauthorized person cannot decrypt encrypted data, the person can newly create a disk 
which operates in an authorized apparatus by copying all the data on a disk to a new 
disk. 

Disclosure of the Invention 

Accordingly, an object of the present invention is to provide an information 
recording/playback system constituting an illegal-copying prevention system which is 
also effective for RAM media, and to provide an information recording apparatus, an 
information playback apparatus, an authentication data recording apparatus, an 
authentication processing apparatus, an information recording/playback method, an 
information recording method, an information playback method, an authentication data 
recording method, an infonnation-recording-medium authentication method, and an 
information recording medium. 
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The present invention is an information recording/playback system for 
recording and playing back information and is characterized by comprising: an 
authentication data recording control part which provides control of detecting random 
pattern information based on random physical phenomena from a 
random-pattern-information recording part used for recording such 
random-physical-phenomena-based random pattern information on an information 
recording medium; generating medium identification information from the random 
pattern information; and recording the medium identification information as 
authentication data in the authentication data recording part on the information 
recording medium; an authentication processing part which detects the random pattern 
information from the random-pattem-information recording part, generates 
medium-identification-information verification data from the random pattern 
information; reads authentication data from the authentication data recording part on 
the information recording medium; and performs authentication processing for the 
information recording medium based on medium-identification-information 
verification data generated from the random pattern information and based on the 
authentication data; and an information recording/playback control part which 
provides control of recording information on an information recording medium and 
playing back information from an information recording medium based on an 
authentication result from the authentication processing part. 

Furthermore, the present invention is an information recording apparatus for 
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recording information on an information recording medium including: a 
random-pattern-information recording part which records random pattern information 
based on random physical phenomena; and an authentication data recording part which 
stores, as authentication data; medium identification information created according to 
random pattern information detected from the random-pattem-information recording 
part, and is characterized by comprising: a random-pattem-information detection part 
which detects random pattern information from the random-pattem-information 
recording part on the information recording medium; a verification data creation part 
which creates medium-identification-information verification data from random 
pattern information detected by the random-pattern-information detection part; an 
authentication processing part which reads authentication data from the authentication 
data recording part on the information recording medium; performs authentication 
processing for an information recording medium based on 
medium-identification-information verification data created by the verification data 
creation part and based on the authentication data; and controls whether to enable 
writing information onto an information recording medium based on an authentication 
result; and a recording control part which provides control of recording information 
onto an information recording medium. 

Furthermore, the present invention is an information playback apparatus for 
playing back information from an information recording medium including: a 
random-pattem-information recording part which records random pattern information 
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based on random physical phenomena; and an authentication data recording part which 
stores; as authentication data; medium identification information created according to 
random pattern information detected from the random-pattem-information recording 
part; and is characterized by comprising: a random-pattern-information detection part 
which detects random pattern information from the random-pattem-information 
recording part on the information recording medium; a verification data creation part 
which creates medium-identification-information verification data from random 
pattern information detected by the random-pattern-infonnation detection part; an 
authentication processing part which reads authentication data from the authentication 
data recording part on the information recording medium, and performs authentication 
processing for an information recording medium based on 
medium-identification-infomiation verification data created by the verification data 
creation part and based on the authentication data; and a playback control part which 
provides control of reading information from an information recording medium. 

In an authentication data recording apparatus which records authentication 
information on an information recording medium, the present invention is 
characterized by comprising: a random-pattern-information detection part which 
detects random pattern information from a random-pattern-information recording part 
on an information recording medium used for recording random pattern information 
based on random physical phenomena; a medium identification information creation 
part which creates medium identification information from the random pattern 
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information detected by the random-pattern-infonnation detection part; and an 
authentication data recording control part which provides control of recording, as 
authentication data, medium identification information created by the medium 
identification information creation part by using an authentication data recording part 
on the information recording medium. 

In an authentication processing apparatus which performs authentication 
processing for an infonnation recording medium, the present invention is characterized 
by comprising: a random-pattern-infonnation detection part which detects random 
pattern information from a random-pattern-information recording part on the 
information recording medium; a verification data creation part which creates 
medium-identification-information verification data from random pattern information 
detected by the random-pattern-infonnation detection part; and an authentication 
processing part which plays backs authentication data from a authentication data 
recording part on an infonnation recording medium and perfonns authentication 
processing for an information recording medium based on 
medium-identification-infonnation verification data created by the verification data 
creation part and based on the authentication data. 

Further, the present invention is an infonnation recording/playback method for 
recording and playing back infonnation, and is characterized by comprising; an 
authentication data recording control process which detects random pattern 
infonnation based on random physical phenomena from arandom-pattern-infomiation 
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recording part used for recording random pattern information based on random 
physical phenomena on an information recording medium, creates medium 
identification information from the random pattern information, and controls 
recording; as authentication data; the medium identification information in an 
authentication data recording part on the information recording medium; an 
authentication process which detects the random pattern information from the 
random-pattern-information recording part; creates medium-identification-infonnation 
verification data from the random pattern information; reads authentication data from 
an authentication data recording part on the information recording medium; and 
performs authentication processing for the information recording medium based on 
medium-identification-infomiation verification data created from the random pattern 
information and based on the authentication data; and an information 
recording/playback control process which provides control of recording information 
on an information recording medium and playing back information from an 
information recording medium based on an authentication result from the 
authentication process. 

Furthermore, the present invention is an information recording method for 
recording information on an information recording medium including: a 
random-pattern-information recording part which records random pattern information 
based on random physical phenomena; and an authentication data recording part which 
stores, as authentication data, medium identification information created according to 
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random pattern information detected from the random-pattern-information recording 
part; and is characterized by comprising: a random-pattern-information detection 
process which detects random pattern information from a random-pattem-information 
recording part on an information recording medium; a verification data creation 
process which creates medimn-identification-information verification data from 
random pattern information detected by the random-pattern-information detection 
process; an authentication process which reads authentication data from the 
authentication data recording part on an information recording medium; performs 
authentication processing for an information recording medium based on 
medium-identification-information verification data created by the verification data 
creation process and based on the authentication data; and controls whether to enable 
writing information onto an information recording medium based on an authentication 
result; and a recording control process which provides control of recording information 
onto an information recording medium. 

Furthermore, the present invention is an information playback method for 
playing back information from an information recording medium including: a 
random-pattem-infonnation recording part which records random pattern information 
based on random physical phenomena; and an authentication data recording part which 
stores; as authentication data, medium identification information created according to 
random pattern information detected from the random-pattern-information recording 
part; and is characterized by comprising: a random-pattern-infonnation detection 
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process which detects random pattern infonnation from a random-pattern-information 
recording part on an infonnation recording medium; a verification data creation 
process which creates medium-identification-infoniiation verification data from 
random pattern information detected by the random-pattern-information detection 
process; an authentication process which reads authentication data from an 
authentication data recording part on the information recording medium; and performs 
authentication processing for an information recording medium based on 
medium-identification-infomiation verification data created by the verification data 
creation process and based on the authentication data; and a playback control process 
which controls reading information from an infonnation recording medium. 

In an authentication data recording method which records authentication 
infonnation on an information recording medium, the present invention is 
characterized by comprising: a random-pattem-infonnation detection process which 
detects random pattern infonnation from a random-pattern-information recording part 
on an infonnation recording medium used for recording random pattern information 
based on random physical phenomena; a medium identification infonnation creation 
process which creates medium identification information from the random pattern 
information detected by the random-pattern-information detection part; and an 
authentication data recording control process which provides control of recording, as 
authentication data; medium identification information created by the medium 
identification infonnation creation process by using an authentication data recording 
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part on the information recording medium. 

In an authentication processing method which performs authentication 
processing for an information recording medium, the present invention is characterized 
by comprising: a random-pattern-information detection process which detects random 
pattern information from a random-pattern-information recording part on an 
information recording medium; a verification data creation process which creates 
medium-identification-information verification data from random pattern information 
detected by the random-pattern-information detection process; and an authentication 
process which plays back authentication data from an authentication data recording 
part on an information recording medium, and performs authentication processing for 
an information recording medium based on medium-identification-information 
verification data created by the verification data creation process and based on the 

authentication data. 

With respect to information recording medium for recording information, the 
present invention is characterized by comprising: a random-pattern-information 
recording part which records random pattern information based on random physical 
phenomena; an authentication data recording part which stores, as authentication data, 
medium identification information created according to random pattern information 
detected from the random-pattern-information recording part; and an information 
recording part for recording information. 
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Brief Description of the Drawings 

FIG. 1 is a view illustrating an optical disk to which the present invention is 
applied; 

FIG. 2 is a block diagram showing the construction of an authentication data 
recording apparatus for recording authentication data on the optical disk; 

FIG. 3 is a flowchart showing specific processing contents of an authentication 
data creation part in the authentication data recording apparatus; 

FIG. 4 is a block diagram showing the construction of an optical disk 
recording/playback apparatus which uses the optical disk; 

FIG. 5 is a flowchart showing specific processing contents of an authentication 
processing part in the optical disk recording/playback apparatus; 

FIG. 6 is a view showing a revocation list used for authentication processing by 
the authentication processing part; 

FIG. 7 is a view showing a public key list used for authentication processing by 
the authentication processing part; 

FIG. 8 is a block diagram showing the construction of an encryption part of a 
recording/playback circuit of the optical disk recording/playback apparatus; 

FIG. 9 is a view schematically showing the structure of data recorded on an 
optical disk by the optical disk recording/playback apparatus; 

FIG. 10 is a block diagram showing the construction of a decryption part of the 
recording/playback circuit in the optical disk recording/playback apparatus; 
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FIG. 1 1 is a flowchart showing the operation of a recording mode of the optical 
disk recording/playback apparatus; 

FIG. 12 is a flowchart showing the operation of a playback mode of the optical 
disk recording/playback apparatus; 

FIG. 13 is a block diagram showing another example of the construction of an 
encryption part of the recording/playback circuit in the optical disk recording/playback 
apparatus; 

FIG. 14 is a block diagram showing another example of the construction of a 
decryption part of the recording/playback circuit in the optical disk recording/playback 
apparatus; and 

FIG. 15 is a view illustrating a card-shaped information recording medium to 
which the present invention is applied. 

Best Mode For Carrying Out the Invention 

The best mode for carrying out the present invention is described in detail below 
with reference to the drawings. 

The present invention is applied to a recording/playback system employing, for 
example, an optical disk 1 having a construction such as that shown in FIG. 1. 

The optical disk 1 shown in FIG. 1 is a disk medium into which and from which 
information can be recorded/played back, and has a user data recording part 3, a 
random-pattem-information recording part 4, and an authentication data recording part 
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5, which are three information recording areas formed annularly around a center hole 
2 at the center. The user data recording part 3, the random-pattern-information 
recording part 4, and the authentication data recording part 5 are placed, for example, 
so as to be separated in a two-dimensional manner or separated in a three-dimensional 
manner so that these parts can be accessed independently of each other in order to read 
information. 

In this optical disk 1, the information recording area is separated in a 
two-dimensional manner in the radial direction of the disk, thereby fonning the user 
data recording part 3, the random-pattern-information recording part 4, and the 
authentication data recording part 5. 

In this optical disk 1, the user data recording part 3 formed in the periphery 
thereof is a data area in which user data is recorded or played back. Namely, this area 
records contents such as video, music, and the like. 

Also, the random-pattern-information recording part 4 which is formed in a 
central part thereof is a read-only area in which random pattern information based on 
random physical phenomena is recorded. 

This random-pattern-information recording part 4 is formed by randomly 
scattering, for example, fine magnetized fibers in the area of this 
random-pattern-information recording part 4 and by fixing them when the medium is 
manufactured. The random-pattern-information recording part 4 formed in this 
manner is one in which the random pattern information in the fine magnetized fibers 



14 

is recorded so that it can be detected. 

The random-pattem-information recording part 4 may be such that bits are 
randomly formed and the jitter thereof can be detected as random pattern information. 

Furthermore, the authentication data recording part 5 which is formed in the 
outer periphery of the random- pattern-information recording part 4 is an area in which 
medium identification information created based on the random pattern information 
detected from the random-pattem-information recording part 4 and a digital signature 
for each manufacturer with respect to the medium identification information are 
recorded as authentication data. This authentication data recording part 5 is provided 
in a lead-in area. 

In the optical disk 1 having such a construction, authentication data is recorded 
in the authentication data recording part 5 by an authentication data recording 
apparatus 10 constructed, for example, as shown in FIG. 2. 

This authentication data recording apparatus 10 shown in FIG. 2 comprises a 
spindle motor 1 2 controlled by a servo circuit 1 1 , a recording/playback head 1 3 which 
optically scans the information recording surface of the optical disk 1, a 
random-pattem-information detection part 14 for detecting random pattern information 
from the random-pattem-information recording part 4 of the optical disk 1, a 
medium-identification-information creation part 1 5 for creating medium identification 
information r, an authentication data creation part 16 for creating authentication data, 
and a control section 1 8 for controlling the servo circuit 1 1 and the authentication data 
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creation section 16 on the basis of the setting information input from an input 
operation section 17. 

The spindle motor 12 drivingly rotates the optical disk 1, for example, at a 
constant linear velocity under the control of the servo circuit 11. 

The recording/playback head 13, which comprises an optical head for optically 
scanning the authentication data recording part 5 of the optical disk 1 which is 
drivingly rotated by the spindle motor 12, records and plays back authentication data 
via the authentication data recording part 5. 

The random-pattern-information detection part 14 comprises a magnetic head 
for scanning the random-pattern-information recording part 4 of the optical disk 1 
which is drivingly rotated by the spindle motor 12, and detects in an analog manner the 
random pattern information from the random-pattern-information recording part 4. 
This random-pattern-information detection part 14 supplies the random pattern 
information detected from the random-pattern-information recording part 4 to the 
medium-identification-information creation part 15. 

The medium-identification-information creation part 15 converts the random 
pattern information detected in an analog manner by the random-pattern-information 
detection part 1 4 into digital random pattern information, and supplies this information 
as medium identification information r to the authentication data creation part 16. 

The authentication data creation part 16 affixes a digital signature for each 
manufacturer with respect to the medium identification information r, to the medium 
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identification information r supplied from the medium identification information 
creation part 15 in order to use it as authentication data. 

Here, in creating authentication data to which a digital signature for each 
manufacturer is affixed by the authentication data creation part 16, the manufacturer 
for the recording medium uses a trusted center (TC), and registers its own public key 
required for the verification of the digital signature in the TC so as to request the TC 
to issue a certificate (Cert) in advance. The certificate (Cert) is data in which the TC 
has made a digital signature on the identification information ID of the manufacturer, 
the public key, etc. 

The digital signature technology is a technology capable of certifying that a 
person who created particular data is a particular user. For example, an elliptic curve 
digital signature algorithm (EC-DSA) method used in the IEEE PI 363 is well known. 

In this authentication data recording apparatus 10, as the specific processing 
contents of the authentication data creation part 16 are shown in FIG. 3, additional 
information u such as the manufacturing date of the medium and the manufacturer ID 
is added to the medium identification information r supplied from the medium 
identification information creation part 1 5 in order to create data m (step SI). For this 
data m, digital signature data s is created by using a secret key for each manufacturer 
corresponding to the public key registered in the trusted center (step S2). 

The additional information u is data which may be added to the medium 
identification information r as required. 
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Then, the authentication data creation part 16 combines the data m, the digital 
signature data s, the certificate (Cert) data, and the revocation list into authentication 
data w (step S3), and supplies this authentication data w to the recording/playback 
head 13 (step S4), whereby it is written in the authentication data recording part 5 of 
the optical disk 1. 

Here, the additional information u, the secret key for each manufacturer, and 
the certificate (Cert) data are input, for example, from the input operation part 17 to 
the control part 18, whereby it is provided from the control part 18 to the 
authentication data creation part 16. 

In this authentication data recording apparatus 10, the revocation list provided 
from the trusted center is input from the input operation part 1 7 to the control part 1 8, 
whereby the revocation list is provided from the control part 18 to the authentication 
data creation part 16 so that the revocation list can be recorded in the authentication 
data recording part 5 of the optical disk 1 . In the authentication data recording part 5 
of the optical disk 1, the latest revocation list provided from the trusted center is 
recorded. 

Here, the revocation list is such that the trusted center has made a digital 
signature on the version number thereof which increases monotonously and the 
identification information ID of the manufacturer to which the secret key has been 
revealed and which is determined to have committed a fraud. 

The manufacturer of the recording medium is able to manufacture the optical 
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disk 1 in which the data m, the digital signature data s, the certificate (Cert) data, and 
the revocation list are recorded as authentication data w in the authentication data 
recording part 5 by the authentication data recording apparatus 10 constructed as 
described above. 

The optical disk 1 having such a construction is capable of verifying the validity 
by authentication processing by the random pattern information detected from the 
random-pattern-information recording part 4 in which random pattern information 
from a random physical phenomenon is recorded, and the authentication data recorded 
in the authentication data recording part 16. The random pattern information recorded 
in the random-pattern-information recording part 4 cannot be reproduced because it 
is from a random physical phenomenon. 

In the optical disk 1 having a construction such as that described above, data is 
recorded or played back, for example, by an optical disk recording/playback apparatus 
20 having a construction such as that shown in FIG. 4. 

The optical disk recording/playback apparatus 20 shown in FIG. 4 comprises 
a spindle motor 22 controlled by a servo circuit 21; a recording/playback head 23 
which optically scans the information recording surface of the optical disk 1; a 
random-pattern-information detection part 24 for detecting random pattern information 
from the random-pattern-infonnation recording part 4 of the optical disk 1; a 
medixun-identification-information verification-data creation part 25 for creating 
medium-identification-information verification data r ? ; an authentication processing 
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part 26; a recording/playback part 27; and a control part 19 for controlling the servo 
circuit 2 1 and the recording/playback part 27 on the basis of setting information input 
from an input operation part 28. 

The spindle motor 22 drivingly rotates the optical disk 1, for example, at a 
constant linear velocity under the control of the servo circuit 21. 

The recording/playback head 23 comprises an optical head for optically 
scanning the information recording surface of the authentication data recording part 
5 of the optical disk 1 which is drivingly rotated by the spindle motor 22. The 
recording/playback head 23 plays back the authentication data recorded in the 
authentication data recording part 5, and records data on and plays back data from the 

user data recording part 3. 

The random-pattern-information detection part 24 comprises a magnetic head 
for scanning the random-pattera-information recording part 4 of the optical disk 1 
which is drivingly rotated by the spindle motor 22, and detects in an analog manner 
random pattern information from the random-pattern-information recording part 4. 
This random-pattem-information detection part 24 supplies the random pattern 
information detected from the random-pattern-information recording part 4 to the 
medium-identification-information verification-data creation part 25. 

The mediimi-identification-information verification-data creation part 25 
accomplishes a conversion from information detected by the 
random-pattern-information detection part 24 in an analog manner to digital random 



20 

pattern information and supplies this information as 
medinm-identification-information verification data f to the authentication processing 
part 26. 

The authentication processing part 26 performs a process for authenticating that 
the optical disk 1 is manufactured by an authorized manufacturer. The 
recording/playback part 27 supplies this authentication processing part 26 with 
authentication data w A which is read by the recording/playback head 23 from the 
authentication data recording part 5 of the optical disk 1. The authentication 
processing part 26 performs an authentication process on the basis of the 
medium-identification-information verification data r 5 supplied from the 
medium-identification-information creation part 25 and the authentication data w A . 

The specific processing contents of the authentication processing part 26 are 
shown in FIG. 5. 

More specifically, when the medium-identification-information verification data 
r' and the authentication data w A are input (step Sll), initially, the authentication 
processing part 26 verifies the validity of the revocation list which is entered in the 
authentication data w A that is, the validity of the digital signature of the trusted center, 
by using the public key of the trusted center (step S 12). The public key of the trusted 
center is common to the entire system, and is stored in a nonvolatile memory within 
the apparatus when the apparatus is manufactured. 

As a result of the verification of the revocation list, when the revocation list is 
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valid, the version number of the revocation list is verified (step SI 3). When the 
revocation list is compared with the currently stored revocation list and the version 
number is newer, the revocation list is stored in the nonvolatile memory (step S14). 
A revocation list such as that shown in FIG. 6 is stored in the nonvolatile memory. 

Next, the certificate (Cert) data in the authentication data w A is extracted (step 
SI 5). It is verified that the identification infonnation ID of the manufacturer 
contained in the certificate (Cert) data is not in the revocation list stored in the 
nonvolatile memory (step S 16). Furthermore, it is verified that the digital signature of 
the trusted center, contained in the certificate (Cert) data, is correct (step S17). 

When this verification is passed, data m A and digital signature data s A are 
extracted from the authentication data w A (step S 1 8). It is verified by using the public 
key of the manufacturer in the certificate (Cert) data that the digital signature data s A 
in the authentication data w A is a correct digital signature of the manufacturer with 
respect to the data m A (step SI 9). 

When this verification is passed, the verification result J2 is assumed to be 
passed (step S20). 

Next, medium identification information r A and additional information u A are 
extracted from the authentication data w A (step S21). 

Then, the medium identification information r A extracted from the 
authentication data w A is compared with the medium-identification-information 
verification data r' created by the medium-identification-infonnation creation part 25 
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in order to verify that the difference is within a predetermined error (step S22). This 
example uses an allowable error in consideration of a possible error due to noises 
because digital medium-identification-information verification data r' is generated 
from random pattern information detected as an analog signal No allowable error 
needs to be used when random pattern information is digitally recorded and read. 

When this verification is passed, the verification result Jl is assumed to be 
passed (step S23). 

When both the verification result Jl and the verification result J2 are passed, 
this recording medium is determined to be an authorized one, and the medium 
identification information r A is supplied as authenticated medium identification 
information DiscID to the recording/playback part 27 (step S24). 

Here, the nonvolatile memory may store a public key list such as that shown in 
FIG. 7. 

In this case, the public key list stores the identification information ID of the 
manufacturer, the public key thereof, and a flag indicating whether or not the 
identification information ID is revoked. Furthermore, the public key list stores the 
version number of the latest version of the revocation lists which have been handled 
by the apparatus. 

When this apparatus obtains a valid revocation list which is newer than any of 
those handled by the apparatus from the data w A , a revocation flag corresponding to 
the identification information ID given in that list is set to "YES", that is, is set to be 
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revoked. 

If the identification information ID is not in the table by that time, the item 
thereof is newly created and the flag is set to "YES". 

In contrast, for those in which the identification information ID is not contained 
in the latest revocation list, although it is in the table stored by the apparatus, all the 
flags are set to "NO", that is, are set not to be revoked. Then, the item of the latest 
version number is updated. 

When the certificate (Cert) data extracted from the authentication data w A is to 
be verified, the identification information ID of the manufacturer is checked. If the 
item of the identification information ID is in the stored list, the public key is recorded, 
and the revocation flag is "NO", the verification of the certificate (Cert) data is not 
necessary, and the public key recorded in the table is used. 

When the item of the identification information ID is in the list, the flag is 
"NO", and the public key is not recorded, the certificate (Cert) data is verified, and 
when it is correct, the public key is stored in the table. 

When the item of the identification information ID is in the list and the flag is 
"YES", the result of the verification J2 is assumed to be invalidated. 

When the item of the identification information ID is not in the list, the 
certificate (Cert) data is verified. When it is correct, an item corresponding to the 
identification information ID is newly created, and the public key is stored. At this 
time, the flag is set to "NO". 
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As a result of having a public key list in this manner, in many cases, a medium 
manufactured by the same manufacturer is used; in most cases of a second time and 
thereafter, it is possible to omit the verification of the certificate (Cert) data. 

In this optical disk recording/playback apparatus 20, the operations mode of the 
recording/playback part 27 is switched by the control part 29 in accordance with a 
control command input from the input operation part 2 8 . This recording/playback part 
27 comprises an encryption part 30 and a decryption part 40. In the recording mode, 
user data input from an external source is encrypted by the encryption part 30, and the 
encrypted user data is recorded in the user data recording part 3 of the optical disk 1 
via the recording/playback head 23. Also, in the playback mode, encrypted user data 
which is read from the user data recording part 3 of the optical disk 1 by the 
recording/playback head 23 is decrypted by the decryption part 40, and is output to an 
external source. 

The encryption part 30, as the specific construction thereof is shown in FIG. 8, 
comprises a Kem generation module 3 1, a random number generation circuit 32, a Kd 
encryption/decryption circuit 33, a Ks encryption circuit 34, and a content data 
encryption circuit 35. 

The Kem generation module 3 1 comprises a Km memory 3 1 A having a master 
key Km stored therein, and a hash function circuit 3 IB to which the master key Km 
is supplied from the Km memory 31A and to which authenticated medium 
identification information DiscID is supplied from the authentication processing part 
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26. 

The master key Kin is a secret key which is given when the license of copyright 
is received. 

The hash function circuit 3 IB concatenates an n-bit master key Km and an 
m-bit medium identification information DiscID in order to create (n + m)-bit 
concatenated data (DiscID || Km) in which, for example, the low-order bits are the 
master key Km and the high-order bits are the medium identification information 
DiscID, and applies a hash function H to the created concatenated data (DiscID || Km), 
as shown in the following equation (1): 

Kem = H(DiscID |) Km) (1) 

in order to create an effective master key Kem. Then, the hash function circuit 3 IB 
supplies the Kd encryption/decryption circuit 33 with the master key Km and the 
effective master key Kem created from the authenticated medium identification 
information DiscID. 

Here, "||" of A || B means the concatenation of data A and data B. Also, the 
hash function is a function which outputs data of a fixed length, for example, 64 bits 
or 128 bits, with respect to input data of an arbitrary length, and is a function such that, 
when y (= hash (x)) is given, determination of x is difficult and determination of the 
set of xl and x2 in which hash (xl) = hash (x2) is also difficult. As representative 
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one-direction hash functions, MD5 (Message Digest) and SHA (Secure Hash 
Algorithm) are known. This one-direction hash function is described in detail in 
"Applied Cryptography (Second Edition), Wiley" written by Bruce Schneier. 

Furthermore, the random number generation circuit 32 generates random 
numbers in which random numbers are used as a sector key Ksi and a disk key Kd, 
supplies the sector key Ksi to the Ks encryption circuit 34 and the content data 
encryption circuit 35, and supplies the disk key Kd to the Kd encryption/decryption 
circuit 33 and the Ks encryption circuit 34. 

The Kd encryption/decryption circuit 33 encrypts, by the effective master key 
Kem, the disk key Kd supplied from the random number generation circuit 32 in order 
to create an encrypted disk key EKd. This encrypted disk key Ekd created by the Kd 
encryption/decryption circuit 33 is recorded in the lead-in area of the optical disk 1 via 
the recording/playback head 23. Also, this Kd encryption/ decryption circuit 33 
decrypts the encrypted disk key Ekd read from the lead-in area of the optical disk 1 via 
the recording/playback head 23 in order to create a disk key Kd. This disk key Kd 
created by the Kd encryption/decryption circuit 33 is supplied to the Ks encryption 
circuit 35. 

Also, the Ks encryption circuit 34 encrypts, by the disk key Kd, the sector key 
Ksi supplied from the random number generation circuit 32 in order to create an 
encrypted sector key EKs. This encrypted sector key EKs created by the Ks 
encryption circuit 34 is recorded in the data area of the optical disk 1 via the 
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recording/playback head 23. 

Furthermore, the content data encryption circuit 35 creates encrypted content 
data by encrypting, by the sector key Ksi, the user data supplied as content data from 
an external source. 

This encrypted content data created by the content data encryption circuit 35 
is recorded in the data area of the optical disk 1 via the recording/playback head 23. 

Here, the data area of the optical disk 1 is formed of a plurality of sectors Si (i 
= 1, 2. ...), as shown in FIG. 9. Each sector Si (i = L 2, ,..) is formed of the header and 
the main data part. An encrypted sector key EKsi (i = 1, 2, ..,) in which the sector key 
Ksi is encrypted by the disk key Kd is stored in the header of each sector Si, and 
encrypted content data in which the user data is encrypted by the sector key Ksi is 
stored in the main data part of each sector Si. The above i = 1, 2, ... indicates the 
sector number. For simplicity, sector numbers are omitted in a part of figures and 
descriptions. 

The decryption part 40, as the specific construction thereof is shown in FIG. 1 0, 
comprises a Kem generation module 41, an EKd decryption circuit 43. an EKs 
decryption circuit 44. and a content data decryption circuit 45. 

The Kem generation module 41 comprises a Km memory 41 A having stored 
therein a master key Km which is a secret key which is given when the license of the 
copyright is received, and comprises a hash function circuit 4 IB which generates an 
effective master key Kem by a computation process shown in equation (1) described 
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above from the master key Km supplied from the Km memory 41 A and the 
authenticated medium identification information DiscID provided from the 
authentication processing part 26. The hash function circuit 4 IB supplies the EKd 
decryption circuit 43 with the master key Km and the effective master key Kern 
created from the authenticated medium identification information DiscID. 

This Kem generation module 4 1 is constructed similarly to the Kem generation 
module 31 of the encryption part 30, and may also be used as the Kem generation 
module 3 1 . 

The EKd decryption circuit 43 creates the disk key Kd by decrypting, by the 
effective master key Km, the encrypted disk key Ekd read from the lead-in area of the 
optical disk 1 by the recording/playback head 23, and supplies the decrypted disk key 
Kd to the EKs decryption circuit 44. 

The EKs decryption circuit 44 creates a sector key Ks by decrypting, by the disk 
key Kd, the encrypted sector key EKs read from the data area of the optical disk 1 by 
the recording/playback head 23, and supplies the decrypted sector key Ks to the 
content data decryption circuit 45. 

The content data decryption circuit 45 decrypts, by the sector key Ks, the 
encrypted content data read from the data area of the optical disk 1 by the 
recording/playback head 23. 

In the optical disk recording/playback apparatus 20 constructed as described 
above, when a recording mode is set in the control part 29 as a result of a recording 
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command being input from the input operation part 28, the control part 29 controls the 
recording/playback part 27 so that the user data is recorded in the optical disk 1 in 
accordance with the procedure such as that shown in the flowchart of FIG. 11. 

In the following description, it is assumed that authentication processing has 
already been performed on the optical disk 1 by the authentication processing part 26 
and user data is recorded on the optical disk 1 which is authenticated to be an 
authorized one. 

In the recording mode, the encryption part 30 of the recording/playback part 27 
is in an operating state, and the Kem generation module 3 1 of the encryption part 30 
receives the authenticated medium identification information DiscID from the 
authentication processing part 26 (step S31), reads the master key Km from the Km 
memory 31 A (step S32), and causes the hash function circuit 3 IB to create an 
effective master key Kem from the medium identification information DiscID and the 
master key Km (step S33). 

Next, the Kd encryption/decryption circuit 33 determines whether or not the 
encrypted disk key Ekd has been recorded in the lead-in area of the optical disk 1 (step 
S34). 

Then, when the encrypted disk key Ekd has not been recorded, the Kd 
encryption/decryption circuit 33 uses a random number of, for example, 40 bits, 
generated by the random number generation circuit 32 as a disk key Kd (step S3 5), 
creates an encrypted disk key Ekd by encrypting this disk key Kd by the effective 
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master key Kern, and records this encrypted disk key Ekd in the lead-in area of the 
optical disk 1 (step S3 6) . 

When the encrypted disk key Ekd has been recorded, the Kd 
encryption/decryption circuit 33 obtains the disk key Kd by decrypting the encrypted 
disk key Ekd by the effective master key Km (step S37). 

Next, the Ks encryption circuit 34 uses the 40-bit random number generated 
by the random number generation circuit 32 as a sector key Ksi (step S3 8), creates an 
encrypted sector key EKsi by encrypting this sector key Ksi by the disk key Kd, and 
records this encrypted sector key EKsi in the sector header (step S39). 

Then, the content data encryption circuit 35 creates encrypted content data by 
encrypting the user data by the sector key Ksi, and records this encrypted content data 
in the main data part (step S40). 

Furthermore, the content data encryption circuit 35 determines whether or not 
all the user data to be recorded has been recorded (step S4 1). When there is user data 
to be recorded, the next sector is accessed (step S42), and the process returns to step 
S38, whereby processing from step S38 to step S42 is performed repeatedly. 

When all the user data has been recorded completely in the data area of the 
optical disk 1 in this manner, the recording mode is terminated. 

Also, in this optical disk recording/playback apparatus 20, when a playback 
mode is set in the control part 29 as a result of a recording command being input from 
the input operation part 28, the control part 29 controls the recording/playback part 27 
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so that the user data is read from the optical disk 1 in accordance with the procedure 
such as that shown in the flowchart of FIG. 12. 

In the following description, it is assumed that authentication processing has 
already been performed on the optical disk 1 by the authentication processing part 26 
and user data is read from the optical disk 1 which is authenticated to be an authorized 
one. 

In the playback mode, the decryption part 40 of the recording/playback part 27 
is in an operating state. The Kern generation module 41 of the decryption part 40 
receives authenticated medium identification information DiscID from the 
authentication processing part 26 (step S51), reads the master key Km from the Km 
memory 41 A (step S52), and causes the hash function circuit 4 IB to create an 
effective master key Kem from the medium identification information DiscID and the 
master key Km (step S53). 

Next, the EKd decryption circuit 43 creates the disk key Kd by decrypting, by 
the effective master key Kem, the encrypted disk key Ekd read from the lead-in area 
of the optical disk 1 (step S54). 

Next, the EKs decryption circuit 44 creates a sector key Ksi by decrypting the 
encrypted sector key EKsi read from the data area of the optical disk 1 (step S55). 

Then, the content data decryption circuit 45 decrypts, by the sector key Ks, the 
encrypted content data read from the data area of the optical disk 1 (step S56). 

Furthermore, the content data decryption circuit 45 determines whether all the 
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content data to be read has been read (step S57). When there is content data to be 
read, the next sector is accessed (step S58), and the process returns to step S25, 
whereby processing from step S55 to step S58 described above is performed 
repeatedly. 

When all the required content data has been completely read from the data area 
of the optical disk 1 in this manner, the playback mode is terminated. 

On the optical disk 1 of which user data recording part 3 records user data by 
means of the optical disk recording/playback apparatus 20, the data area records the 
encryption key for the user data, that is, the sector key Ks, as the encrypted sector key 
EKs encrypted by the disk key Kd. Furthermore, the lead-in area records the disk key 
Kd as an encrypted disk key Ekd which is encrypted by the effective master key Kem 
created on the basis of the master key Km and the medium identification information 
DiscID unique to this optical disk 1. Therefore, playing back the user data is only 
available on an authorized playback apparatus having the master key Km and an 
authentication processing function for performing authentication processing on the 
medium identification information DiscID based on the 
medium-identification-information verification data created according to the random 
pattern information recorded in the random-pattem-information recording part 4 of the 
optical disk 1 and based on the authentication data recorded in the authentication data 
recording part 5. Decrypting and playing back the user data is impossible on a 
playback apparatus which does not have the authentication processing function or the 
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master key Km. 

Also, even if the data of the data area and the lead-in area of the optical disk 1 
is illegally copied as it is into a new disk, since the random pattern information 
recorded in the random-pattern-information recording part 4 of the optical disk 1 is 
from a random physical phenomenon, it is not possible to detect, from the 
random-pattern-information recording part of the new disk, the same random pattern 
information as the random pattern information recorded in the 
random-pattern-infomiation recording part 4 of the optical disk 1 even if the new disk 
is an authorized one including a random-pattern-information recording part. 
Therefore, an illegally copied disk is not played back by the authorized playback 
apparatus. 

Here, in the optical disk recording/playback apparatus 20, the encryption part 
30 creates the effective master key Kem from the master key Km on the basis of the 
medium identification information DiscID of the optical disk 1 which is authenticated 
by the authentication processing part 26, encrypts the disk key Kd by this effective 
master key Kem, encrypts an encryption key used for encrypting the user data, that is, 
the sector key Ks, by the disk key Kd, and records the user data encrypted by the 
sector key Ks, the encrypted disk key Kd, and the sector key Ks on the optical disk 1. 
However, the user data may be encrypted based on the medium identification 
information DiscID of the optical disk 1 which is authenticated by the authentication 
processing part 26. For example, as shown in FIG. 13, there is provided an effective 
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sector key creation part 130 (Kes creation circuit) for creating an effective sector Kes 
from the sector key Ks generated as a random number in the random number 
generation circuit 32 on the basis of the effective master key Kem. The content data 
encryption circuit 35 uses the effective sector key Kes created by the sector key 
creation circuit 130 to encrypt user data and create encrypted content data. 

In this case, as shown in FIG. 14, the decryption part 40 is provided with an 
effective sector key creation circuit (Kes creation circuit) 140 for creating an effective 
sector key Kes from the sector key Ks on the basis of the effective master key Kem. 
The EKs decryption circuit 44 uses the disk key Kd to create a sector key Ks by 
decrypting the encrypted sector key EKs read by the recording/playback head 23 from 
the data area of the optical disk 1. From this sector key Ks, the effective sector key 
creation circuit 140 creates an effective sector key Kes. Using this effective sector key 
Kes, the content data decryption circuit 45 decrypts the encrypted content data. 

Although in the above-described embodiment, the present invention is applied 
to a recording/playback system using the optical disk 1 constructed as shown in FIG. 
1, it is also possible to construct a recording/playback system using a card-shaped 
recording medium 5 1 such as that shown in FIG. 15. 

More specifically, this card-shaped recording medium 51 shown in FIG. 13 
comprises a user data recording part 53 in which user data is recorded, a 
random-pattern-information recording part 54 in which random pattern information 
from a random physical phenomenon is recorded, and an authentication data recording 
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part 5 5 in which medium identification information created on the basis of the random 
pattern information detected from the random-pattern-information recording part 54, 
and the digital signature for each manufacturer with respect to the medium 
identification information are recorded as authentication data. 

Like the above-described optical disk recording/playback system, the 
recording/playback system using the card-shaped recording medium 5 1 with such a 
construction detects random pattern information based on random physical phenomena 
from the random-pattern-information recording part 54, and creates medium 
identification information from the random pattern information. Furthermore, 
authentication data is read from the authentication data recording part 55 on the 
information recording medium, and authentication processing for the information 
recording medium can be performed based on the medium identification information 
created from the random pattern information and the authentication data. An 
encryption key is created from the medium identification information of the 
information recording medium authenticated by the authentication processing, and 
data which is encrypted with the encryption key is recorded/read via the user data 
recording part 53 on the authenticated information recording medium, making it 
possible to reliably prevent illegal copying of the information of the user data 
recording part 53. 

As has been described above in detail, the embodiment of the present invention 
detects random pattern information based on random physical phenomena from the 
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random-pattem-information recording part on the information recording medium 
which is provided with a random-pattern-infonnation recording part including 
recorded therein random pattern information based on random physical phenomena, 
creates medium identification information from the random pattern information, and 
records, as authentication data, the medium identification information, together with 
a digital signature for each manufacturer with respect to the medium identification 
information, in the authentication data recording part on the information recording 
medium, making it possible to provide an information recording medium which 
records, as authentication data, medium identification information, together with a 
digital signature for each manufacturer with respect to the medium identification 
information, in the authentication data recording part. Then, with respect to the 
information recording medium including a random-pattern-information recording part 
including recorded therein random pattern information from a random physical 
phenomenon, an authentication data recording part including stored therein medium 
identification information created based on the random pattern information detected 
from the random-pattern-information recording part, and a digital signature for each 
manufacturer with respect to the medium identification information as authentication 
data, and a user data recording part in which user data is recorded, random pattern 
information based on random physical phenomena is detected from the 
random-pattem-infonnation recording part, medium identification information is 
created from the random pattern information, and authentication data is read from the 
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authentication data recording part on the information recording medium, and 
authentication processing for the information recording medium can be performed 
based on the medium identification information created from the random pattern 
information and the authentication data. An encryption key is created from the 
medium identification information on the information recording medium authenticated 
by the authentication processing, and data which is encrypted with the encryption key 
is recorded/read via the user data recording part on the authenticated information 
recording medium, making it possible to construct an illegal-copying prevention 
system which is also effective for writable media. 
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CLAIMS 

1. An information recording/playback system for recording and playing back 
information, comprising: 

an authentication data recording control part which provides control of detecting 
random pattern information based on random physical phenomena from a 
random-pattern-information recording part used for recording random pattern 
information based on random physical phenomena, creating medium identification 
information from the random pattern information, and recording, as authentication 
data, the medium identification information in an authentication data recording part 
on the information recording medium; 

an authentication processing part which detects the random pattern information 
from the random-pattern-information recording part, creates 
medium-identification-infonnation verification data from the random pattern 
information, reads authentication data from the authentication data recording part on 
the information recording medium, and performs authentication processing for the 
information recording medium based on medixun-identification-information 
verification data created from the random pattern information and based on the 
authentication data; and 

an information recording/playback control part which provides control of 
recording information on an information recording medium and playing back 
information from an information recording medium based on an authentication result 
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from the authentication processing part. 

2. The information recording/playback system according to claim 1, wherein there 
is further provided an encryption part which encrypts information by using medium 
identification information from an information recording medium authenticated by the 
authentication processing, and 

wherein the information recording/playback control part provides control of 
recording information encrypted by the encryption part on the authenticated 
information recording medium. 

3. The information recording/playback system according to claim 2, wherein the 
information recording/playback control part provides control of recording encrypted 
information and the encryption key used for information encryption on the 
authenticated information recording medium. 

4. The information recording/playback system according to claim 3, wherein the 
encryption part encrypts information using the encryption key and encrypts the 
encryption key used for information encryption by using medium identification 
information on an information recording medium authenticated by the authentication 
processing, 

wherein the information recording/playback control part provides control of 
recording information encrypted with the encryption key and the encrypted encryption 
key on the authenticated information recording medium. 

5. The information recording/playback system according to claim 2, wherein the 
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encryption part creates an encryption key used for the information encryption by using 
medium identification information on an information recording medium authenticated 
by the authentication processing. 

6. The information recording/playback system according to claim 1, wherein there is 
further provided a decryption part for decrypting information by using medium 
identification information on an information recording medium authenticated by the 
authentication processing, 

wherein the information recording/playback control part provides control of 
reading encrypted information from the authenticated information recording medium, 
and 

wherein the decryption part decrypts encrypted information read by the 
information recording/playback control part from an information recording medium 
by using medium identification information on an information recording medium 
authenticated by the authentication processing. 

7. The information recording/playback system according to claim 6, characterized in 
that the information recording/playback control part provides control of reading 
encrypted information and the encryption key used for information encryption from 
the authenticated information recording medium. 

8. The information recording/playback system according to claim 7, wherein the 
information recording/playback control part provides control of reading encrypted 
information and the encrypted encryption key from the information recording medium, 
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and 

wherein the decryption part decrypts a read and encrypted encryption key by 
using medium identification information on an information recording medium 
authenticated by the authentication processing and decrypts encrypted information by 
using the encryption key which was encrypted and information thereof is decrypted. 

9. The information recording/playback system according to claim 1, wherein the 
authentication data recording control part records, as authentication data, the medium 
identification information together with a digital signature of a recording person who 
recorded the medium identification information in the authentication data recording 
part on the information recording medium. 

10. An information recording/playback system according to claim 9, wherein the 
authentication data recording control part records a digital signature for a 
manufacturer of the information recording medium as a digital signature for a 
recording person who recorded the medium identification information. 

1 1 . An information recording apparatus for recording information on an information 
recording medium including a random-pattern-infonnation recording part for recording 
random pattern information based on random physical phenomena and an 
authentication data recording part for storing, as authentication data, medium 
identification information generated according to random pattern information detected 
from the random-pattern-information recording part, wherein the information 
recording apparatus is , comprising: 
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a random-pattern-infonnation detection part which detects random pattern 
information from a random-pattern-infonnation recording part on an information 
recording medium; 

a verification data creation part which creates 
medimn-identification-information verification data from random pattern information 
detected by the random-pattem-information detection part; 

an authentication processing part which reads authentication data from an 
authentication data recording part on an information recording medium, performs 
authentication processing for an information recording medium based on 
medium-identification-information verification data created by the verification data 
creation part and based on the authentication data, and controls whether to write 
information onto an information recording medium based on an authentication result; 
and 

a recording control part which provides control of recording information on an 
information recording medium. 

12. The information recording apparatus according to claim 11, wherein there is 
further provided an encryption part which encrypts information by using medium 
identification information on an information recording medium authenticated by the 
authentication processing, and 

wherein the recording control part provides control of recording information 
encrypted by the encryption part on the authenticated information recording medium. 
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13. The information recording apparatus according to claim 12, wherein the 
recording control part provides control of recording encrypted information and the 
encryption key used for information encryption on the authenticated information 
recording medium. 

14. The information recording apparatus according to claim 13, wherein the 
encryption part encrypts information by using the encryption key and encrypts the 
encryption key used for information encryption by using medium identification 
information on an information recording medium authenticated by the authentication 
processing, and 

wherein the recording control part provides control of recording information 
encrypted with the encryption key and the encrypted encryption key on the 
authenticated information recording medium. 

1 5 . The information recording apparatus according to claim 12, characterized in that 
the encryption part creates an encryption key used for the information encryption by 
using medium identification information on an information recording medium 
authenticated by the authentication processing. 

16. The information recording apparatus according to claim 11, wherein that the 
authentication processing part verifies validity of the medium identification 
information with respect to an information recording medium which records, as 
authentication data, the medium identification information together with a digital 
signature of a recording person who recorded the medium identification information 
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based on the recording person's digital signature, and performs authentication 
processing with respect to an information recording medium based on 
medium-identification-information verification data created by the verification data 
creation part and based on verified valid medium identification information. 

17. The information recording apparatus according to claim 16, wherein the 
authentication processing part verifies validity of the medium identification 
information with respect to an information recording medium which records a digital 
signature of a manufacturer for the information recording medium as a digital 
signature for a recording person of the medium identification information based on the 
manufacturer's digital signature. 

18. The information recording apparatus according to claim 16, wherein the 
authentication processing part performs authentication processing with respect to an 
information recording medium which records a revocation list about a recording 
person together with the authentication data based on the revocation list. 

19. The information recording apparatus according to claim 18, wherein the 
authentication processing part has a storage part for storing the revocation list, stores 
a revocation list recorded on an information recording medium in the storage part 
when this revocation list is valid and is newer than the revocation list stored in the 
storage part, and performs authentication processing based on the revocation list stored 
in the storage part. 

20. An information playback apparatus for playing back information from an 
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information recording medium including a random-pattern-information recording part 
for recording random pattern information based on random physical phenomena and 
an authentication data recording part for storing, as authentication data, medium 
identification information created according to random pattern information detected 
from the random-pattem-information recording p art, wherein the information playback 
apparatus, 

a random-pattern-information detection part which detects random pattern 
information from the random-pattem-information recording part on the information 
recording medium; 

a verification data creation part which creates 
medium-identification-infonnation verification data from random-pattern-information 
detected by the random-pattern-information detection part; 

an authentication processing part which reads authentication data from the 
authentication data recording part and performs authentication processing with respect 
to an information recording medium based on medium-identification-infonnation 
verification data created by the verification data creation part and based on the 
authentication data; and 

a playback control part which provides control of reading information from an 
information recording medium. 

21. The information playback apparatus according to claim 20, wherein the playback 
control part provides control of reading encrypted information from the authenticated 
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information recording medium, and 

wherein the decryption part decrypts encrypted information read from the 
information recording medium by the playback control part by using medium 
identification information on the information recording medium authenticated by the 
authentication processing. 

22 . The information playback apparatus according to claim 2 1 , wherein the playback 
control part provides control of reading encrypted information and an encryption key 
used for the information encryption from the authenticated information recording 
medium. 

23. The information playback apparatus according to claim 22, wherein the playback 
control part provides control of reading encrypted information and the encrypted 
encryption key from the authenticated information recording medium, and 

wherein the decryption part decrypts a read and encrypted encryption key by 
using medium identification information on an information recording medium 
authenticated by the authentication processing and decrypts encrypted information by 
using the encryption key which was encrypted and information thereof is decrypted. 

24. The information playback apparatus according to claim 20, wherein the 
authentication processing part verifies validity of the medium identification 
information with respect to an information recording medium which records, as 
authentication data, the medium identification information together with a digital 
signature of a recording person who recorded the medium identification information 
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based on the recording person's digital signature, and performs authentication 
processing with respect to the information recording medium based on 
medium-identification-information verification data created by the verification data 
creation part and based on verified valid medium identification information. 

25. The information playback apparatus according to claim 24, wherein the 
authentication processing part verifies validity of the medium identification 
information with respect to an information recording medium which records a digital 
signature of a manufacturer for the information recording medium as a digital 
signature for a recording person of the medium identification information based on the 
manufacturer's digital signature. 

26. The information playback apparatus according to claim 24, wherein the 
authentication processing part performs authentication processing with respect to an 
information recording medium which records a revocation list about a recording 
person together with the authentication data based on the revocation list. 

27. The information playback apparatus according to claim 26, wherein the 
authentication processing part has a storage part for storing the revocation list, stores 
a revocation list recorded on an information recording medium in the storage part 
when this revocation list is valid and is newer than the revocation list stored in the 
storage part, and performs authentication processing based on the revocation list stored 
in the storage part. 

28. An authentication data recording apparatus for recording authentication 
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information on an information recording medium, comprising: 

a random-pattern-information detection part which detects random pattern 
information from a random-pattern-information recording part on an information 
recording medium for storing random pattern information based on random physical 
phenomena; 

a medium identification information creation part which creates medium 
identification information from the random pattern information detected by the 
random-pattern-information detection part; and 

an authentication data recording control part which provides control of 
recording, as authentication data, the medium identification information created by the 
medium identification information creation part in an authentication data recording 
part on the information recording medium. 

29. The authentication data recording apparatus according to claim 28, wherein the 
authentication data recording control part records, as authentication data, the medium 
identification information together with a digital signature for a recording person of 
the medium identification information in an authentication data recording part on the 
information recording medium. 

30. The authentication data recording apparatus according to claim 28, characterized 
in that the authentication data recording control part records a digital signature for a 
manufacturer of the infonnation recording medium as a digital signature for a 
recording person of the medium identification information. 
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31. The authentication data recording apparatus according to claim 28, wherein the 
authentication data recording control part records a revocation list about a 
manufacturer together with the authentication data in an authentication data recording 
part on the information recording medium. 

32. An authentication processing apparatus for performing authentication processing 
with respect to an information recording medium, comprising: 

a random-pattern-information detection part which detects random pattern 
information from a random-pattern-information recording part on the information 
recording medium; 

a verification data creation part which creates 
medium-identification-infonnation verification data from random pattern information 
detected by the random-pattern-information detection part; and 

an authentication processing part which reads authentication data from an 
authentication data recording part on the information recording medium and performs 
authentication processing with respect to the information recording medium based on 
medium-identification-infonnation verification data created by the verification data 
creation part and based on the authentication data. 

33. The authentication processing apparatus according to claim 32, wherein the 
authentication processing part verifies validity of the medium identification 
information with respect to an information recording medium which records, as 
authentication data, the medium identification information together with a digital 
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signature of a recording person who recorded the medium identification information 
based on the recording person's digital signature, and performs authentication 
processing with respect to the information recording medium based on 
medium-identification-information verification data created by the verification data 
creation part and based on verified valid medium identification information. 

34. The authentication processing apparatus according to claim 33, wherein the 
authentication processing part verifies validity of the medium identification 
information with respect to an information recording medium which records a digital 
signature of a manufacturer for the information recording medium as a digital 
signature for a recording person of the medium identification information based on the 
manufacturer's digital signature. 

35. The authentication processing apparatus according to claim 33, wherein the 
authentication processing part performs authentication processing with respect to an 
information recording medium which records a revocation list about a recording 
person together with the authentication data based on the revocation list. 

36. The authentication processing apparatus according to claim 35, wherein the 
authentication processing part has a storage part for storing the revocation list, stores 
a revocation list recorded on an information recording medium in the storage part 
when this revocation list is valid and is newer than the revocation list stored in the 
storage part, and performs authentication processing based on the revocation list stored 
in the storage part. 
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37. The authentication processing apparatus according to claim 35, wherein the 
authentication processing part has a storage part, stores a recording person's 
identification infonnation and a public key thereof for a manipulated information 
recording medium together with a revocation flag, updates the revocation flag using 
a new revocation list, and performs authentication processing based on the revocation 
list stored in the storage part. 

38. An information recording/playback method for recording and playing back 
infonnation, comprising: 

an authentication data recording control process which provides control of 
detecting random pattern infonnation based on random physical phenomena from a 
random-pattern-information recording part for recording random pattern information 
based on random physical phenomena on an information recording medium, creating 
medium identification infonnation from the random pattern information, and 
recording, as authentication data, the medium identification infonnation in an 
authentication data recording part on the information recording medium; 

an authentication process which detects the random pattern infonnation from 
the random-pattern-information recording part, creates 
medium-identification-information verification data from the random pattern 
infonnation, reads authentication data from the authentication data recording part on 
the information recording medium, and performs authentication processing with 
respect to the information recording medium based on 
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medimn-identification-infomiation verification data created from the random pattern 
information and based on the authentication data; and 

an information recording/playback control process which provides control of 
recording information on an information recording medium and playing back 
information from an information recording medium based on an authentication result 
from the authentication processing process. 

39. The information recording/playback method according to claim 38, wherein there 
is further provided an encryption process which encrypts information using medium 
identification information from an information recording medium authenticated by the 
authentication processing, and 

wherein the information recording/playback control process provides control of 
recording information encrypted by the encryption process on the authenticated 
information recording medium. 

40. The information recording/playback method according to claim 39, wherein the 
information recording/playback control process provides control of recording 
encrypted information and the encryption key used for information encryption on the 
authenticated information recording medium. 

41 . The information recording/playback method according to claim 40, wherein the 
encryption process encrypts information using the encryption key and encrypts the 
encryption key used for information encryption using medium identification 
information on an information recording medium authenticated by the authentication 
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processing, and 

wherein the infonnation recording/playback control process provides control of 
recording infonnation encrypted with the encryption key and the encrypted encryption 
key on the authenticated information recording medium. 

42. The infonnation recording/playback method according to claim 39, wherein the 
encryption process creates the encryption key used for information encryption by using 
medium identification infonnation on an infonnation recording medium authenticated 
by the authentication processing. 

43. The information recording/playback method according to claim 38, wherein the 
information recording/playback control process provides control of reading encrypted 
infonnation from the authenticated infonnation recording medium, and 

wherein the decryption process decrypts encrypted information read by the 
information recording/playback control process from an infonnation recording medium 
by using medium identification infonnation on an infonnation recording medium 
authenticated by the authentication processing. 

44. The information recording/playback method according to claim 43, wherein the 
information recording/playback control process provides control of reading encrypted 
information and the encryption key used for information encryption from the 
authenticated information recording medium. 

45. The infonnation recording/playback method according to claim 44, wherein the 
infonnation recording/playback control process provides control of reading encrypted 
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information and the encrypted encryption key from the authenticated information 
recording medium, and 

wherein the decryption process decrypts a read and encrypted encryption key 
by using medium identification information on an information recording medium 
authenticated by the authentication processing and decrypts encrypted information by 
using the encryption key which was encrypted and information thereof is decrypted. 

46. The information recording/playback method according to claim 38, wherein the 
authentication data recording control process records, as authentication data, the 
medium identification information together with a digital signature for a recording 
person of the medium identification information in an authentication data recording 
part on the information recording medium. 

47. The information recording/playback method according to claim 46, wherein the 
authentication data recording control process records a digital signature for a 
manufacturer of the information recording medium as a digital signature for a 
recording person of the medium identification information. 

48. An information recording method for recording information on an information 
recording medium including: a random-pattern-infonnation recording part which 
records random pattern information based on random physical phenomena; and an 
authentication data recording part which stores, as authentication data, medium 
identification information created according to random pattern information detected 
from the random-pattern-infonnation recording part, wherein the information 
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recording method, comprising: 

a random-pattem-information detection process which detects random pattern 
information from a random-pattern-information recording part on an information 
recording medium; 

a verification data creation process which creates 
medium-identification-information verification data from random pattern information 
detected by the random-pattern-information detection process; 

an authentication process which reads authentication data from the 
authentication data recording part on an information recording medium, performs 
authentication processing for an information recording medium based on 
medium-identification-infonnation verification data created by the verification data 
creation process and based on the authentication data, and controls whether to enable 
writing information onto an information recording medium based on an authentication 
result; and 

a recording control process which provides control of recording information 
onto an information recording medium. 

49. The information recording method according to claim 48, wherein there is further 
provided an encryption process which encrypts information using medium 
identification information from an information recording medium authenticated by the 
authentication processing, and 

wherein the recording control process provides control of recording information 
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authenticated by the encryption process on the authenticated information recording 
medium. 

50. The information recording method according to claim 49, characterized in that the 
recording control process provides control of recording encrypted information and the 
encryption key used for information encryption on an authenticated information 
recording medium. 

5 1 . The information recording method according to claim 50, wherein the encryption 
process encrypts information using the encryption key and encrypts the encryption key 
used for information encryption using medium identification information on an 
information recording medium authenticated by the authentication processing, and 

wherein the recording control process provides control of recording information 
encrypted with the encryption key and the encrypted encryption key on the 
authenticated information recording medium. 

52. The information recording method according to claim 49, wherein the encryption 
process creates an encryption key used for the information encryption by using 
medium identification information on an information recording medium authenticated 
by the authentication processing. 

53. An information recording method according to claim 48, characterized in that the 
authentication process verifies validity of the medium identification information with 
respect to an information recording medium which records, as authentication data, the 
medium identification information together with a digital signature of a recording 
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person who recorded the medium identification information based on the recording 
person's digital signature, and performs authentication processing with respect to the 
information recording medium based on medium-identification-information 
verification data created by the verification data creation process and based on verified 
valid medium identification information. 

54. The information recording method according to claim 53, wherein the 
authentication process verifies validity of the medium identification information with 
respect to an information recording medium which records a digital signature of a 
manufacturer for the information recording medium as a digital signature for a 
recording person of the medium identification information based on the manufacturer's 
digital signature. 

55. The information recording method according to claim 53, wherein the 
authentication process performs authentication processing with respect to an 
information recording medium which records a revocation list about a recording person 
together with the authentication data based on the revocation list. 

56. The information recording method according to claim 55, wherein the 
authentication process stores a revocation list recorded on an information recording 
medium when this revocation list is valid and is newer than the already stored 
revocation list, and performs authentication processing based on the newly stored 
revocation list. 

57. An information playback method for playing back information from an 
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information recording medium including a random-pattem-information recording part 
for recording random pattern information based on random physical phenomena and 
an authentication data recording part for storing, as authentication data, medium 
identification information created according to random pattern information detected 
from the random-pattem-information recording part, wherein the information playback 
method, comprising: 

a random-pattern-information detection process which detects random pattern 
information from a random-pattem-information recording part on an information 
recording medium; 

a verification data creation process which creates 
medium-identification-information verification data from random pattern information 
detected by the random-pattem-information detection process; 

an authentication process which reads authentication data from the 
authentication data recording part on an information recording medium and performs 
authentication processing for an information recording medium based on 
medium-identification-information verification data created by the verification data 
creation process and based on the authentication data; and 

a playback control process which provides control of reading information from 
an information recording medium. 

58. The information playback method according to claim 57, wherein the playback 
control process provides control of reading encrypted information from the 
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authenticated information recording medium, and 

wherein the decryption process decrypts encrypted information read by the 
playback control process from an information recording medium by using medium 
identification information on an information recording medium authenticated by the 
authentication processing. 

59. The information playback method according to claim 58, wherein the playback 
control process provides control of reading encrypted information and the encryption 
key used for information encryption from the authenticated information recording 
medium. 

60. The information playback method according to claim 59, wherein the playback 
control process provides control of reading encrypted information and the encrypted 
encryption key from the information recording medium, and 

wherein the decryption process decrypts a read and encrypted encryption key 
by using medium identification information on an information recording medium 
authenticated by the authentication processing and decrypts encrypted information by 
using the encryption key which was encrypted and information thereof is decrypted. 

61. The information playback method according to claim 57, wherein the 
authentication process verifies validity of the medium identification information with 
respect to an information recording medium which records, as authentication data, the 
medium identification information together with a digital signature of a recording 
person who recorded the medium identification information based on the recording 
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person's digital signature, and performs authentication processing with respect to an 
information recording medium based on medium-identification-information 
verification data created by the verification data creation process and based on verified 
valid medium identification information. 

62. The information playback method according to claim 61, wherein the 
authentication process verifies validity of the medium identification information with 
respect to an information recording medium which records a digital signature of a 
manufacturer for the information recording medium as a digital signature for a 
recording person of the medium identification information based on the manufacturers 
digital signature. 

63. The information playback method according to claim 61, wherein the 
authentication process performs authentication processing with respect to an 
information recording medium which records a revocation list about a recording person 
together with the authentication data based on the revocation list. 

64. The information playback method according to claim 63, wherein the 
authentication process stores a revocation list recorded on an information recording 
medium in the storage part when this revocation list is valid and is newer than the 
already stored revocation list, and performs authentication processing based on the 
newly stored revocation list. 

65. An authentication data recording method for recording authentication information 
on an information recording medium, comprising: 
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a random-pattem-information detection process which detects random pattern 
information from a random-pattern-information recording part on an information 
recording medium storing random pattern information based on random physical 
phenomena; 

a medium identification information creation process which creates medium 
identification information from the random pattern information detected by the 
random-pattern-information detection process; and 

an authentication data recording control process which provides control of 
recording, as authentication data, the medium identification information created by the 
medium identification information creation process in an authentication data recording 
part on the information recording medium. 

66. The authentication data recording method according to claim 65, wherein the 
authentication data recording control process records, as authentication data, the 
medium identification information together with a digital signature for a recording 
person of the medium identification information in an authentication data recording 
part on the information recording medium. 

67. The authentication data recording method according to claim 66, wherein the 
authentication data recording control process records a digital signature for a 
manufacturer of the information recording medium as a digital signature for a 
recording person of the medium identification information. 

68. The authentication data recording method according to claim 65, wherein the 
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authentication data recording control process records a revocation list about a 
manufacturer together with the authentication data in an authentication data recording 
part on the information recording medium. 

69. An authentication processing method for performing authentication processing 
with respect to an information recording medium, comprising: 

a random-pattern-information detection process which detects random pattern 
information from a random-pattem-information recording part on an information 
recording medium; 

a verification data creation process which creates 
medium-identification-infonnation verification data from random pattern information 
detected by the random-pattern-information detection process; and 

an authentication process which reads authentication data from the 
authentication data recording part on an information recording medium and performs 
authentication processing for an information recording medium based on 
medium-identification-infonnation verification data created by the verification data 
creation process and based on the authentication data. 

70. The authentication processing method according to claim 69, wherein the 
authentication process verifies validity of the medium identification information with 
respect to an information recording medium which records, as authentication data, the 
medium identification information together with a digital signature of a recording 
person who recorded the medium identification information based on the recording 
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person's digital signature, and performs authentication processing with respect to an 
information recording medium based on medium-identification-information 
verification data created by the verification data creation process and based on verified 
valid medium identification information. 

71. The authentication processing method according to claim 70, wherein the 
authentication process verifies validity of the medium identification information with 
respect to an information recording medium which records a digital signature of a 
manufacturer for the information recording medium as a digital signature for a 
recording person of the medium identification information based on the manufacturer's 
digital signature. 

72. The authentication processing method according to claim 70, wherein the 
authentication process performs authentication processing with respect to an 
information recording medium which records a revocation list about a recording person 
together with the authentication data based on the revocation list. 

73. The authentication processing method according to claim 72, wherein the 
authentication process stores a revocation list recorded on an information recording 
medium in the storage part when this revocation list is valid and is newer than the 
already stored revocation list, and performs authentication processing based on the 
newly stored revocation list. 

74. The authentication processing method according to claim 72, wherein the 
authentication process stores a recording person's identification information and a 
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public key thereof for a manipulated information recording medium together with a 
revocation flag, updates the revocation flag using a new revocation list, and performs 
authentication processing based on the revocation list stored in the storage process. 

75. An information recording medium for recording information, comprising: 

a random-pattern-information recording part which records random pattern 
information based on random physical phenomena; 

an authentication data recording part which stores, as authentication data, 
medium identification information created according to random pattern information 
detected from the random-pattem-information recording part; and 

an information recording part which records information. 

76. The information recording medium according to claim 75, wherein the 
authentication data recording part records the medium identification information as 
authentication data together with a digital signature for a recording person of the 
medium identification information. 

77. The information recording medium according to claim 76, wherein the 
authentication data recording part records a digital signature for a manufacturer of the 
information recording medium as a digital signature for a recording person of the 
medium identification information. 

78. The information recording medium according to claim 77, wherein the 
authentication data recording part records a revocation list about a manufacturer 
together with the authentication data. 
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ABSTRACT 

An inforaiation recording medium 1 is provided with: a user data recording part 
3 which records user data; a random-pattern-information recording part 4 which 
records random pattern information from a random physical phenomenon; and an 
authentication data recording part 5 which records, as authentication data, medium 
identification information created on the basis of the random pattern information 
detected from the random-pattem-information recording part 4 and a digital signature 
for each manufacturer with respect to the medium identification information. 
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S51 



RECEIVE AUTHENTICATED Disck ID 



-S51 



READ MASTER KEY Km 



S53 



CREATE EFFECTIVE MASTER KEY Kern 
FROM Disck ID AND Km 



OBTAIN DISK KEY Kd BY 
DECRYPTING Ekd BY Kern 



/ 



S54 
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S55 



DECRYPT ENCRYPTED SECTOR 
KEY Eksi BY Kd IN ORDER TO 
COMPUTE SECTOR KEY Ksi 
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ACCESS NEXT SECTOR 



DECRYPT CONTENT DATA BY Ksi, 
AND OUTPUT IT 
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( END ) 
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Declaration and Power of Attorney for Patent Application 

Japanese Language Declaration 



As a below names inventor, I hereby declare that: 



My residence, post office address and citizenship are as stated 
next to my name: 



I believe I am the original, first and sole inventor(if only one 
name is listed below) or an original, first and joint inventor (if 
plural names are listed below) of the subject matter which is 
claimed and for which a patent is sought on the invention 
entitled. 

INFORMATION RECORDHMG/PIAYBACK SYSTEM 



the specification of which is attached hereto unless the 
following box is checked: 



c co ffi U 0 3ft 51 ffl ft # * i n ti P C T m & H5 £ * 3 ii , 



X was filed on February 7, 20 00 

as United States Application Number of 

PCT International Application Number PCT/JPOO/0065 8 

and was amended on 

(if applicable). 



I hereby state that I have reviewed and understand the contents 
of the above identified specification, including the claims, as 
amended by any amendment referred to above. 



I acknowledge the duty to disclose information which is 
material to patentability as defined in Title 37, Code of Federal 
Regulations, Section 1.56. 



Burden Hour Statement: This form is estimated to take 0.4 hours to complete. Time will vary depending upon the need of the individual case. Any comments on the 
amount of time you are required to complete this form should be sent to Chief Information Officer. U.S. Patent and Trademark Office. Washington. DC 20231. DO 
NOT SEND FEES OR COMPLETED FORMS TO THIS ADDRESS SEND TO: Commissioner of Patents and Trademarks, Washington. DC 2023 1 
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Prior Foreign Application(s) 



I hereby claim foreign priority under Title 35, United States Code, 
Section il9(a)-(d) or 365(b) of any foreign application(s) for patent or 
inventor's certificate, or 365(a) of any PCT International application 
which designated at least one country other than the United States listed 
below and have also identified below, by checking the box, any foreign 
application for patent or inventor's certificate or PCT international 
application having a filing date before that of the application for which 
priority is claimed. 

Priority Not Claimed 



11-030600 
(Number) 

<**> 

P CT/JP00 /00658 
(Number) 



(Number) 



(Number) 

»3**> 



fpumber) 



^timber) 



J apan 
(Country) 

<ffl£> 

PCT 

(Country) 



(Country) 



(Country) 
<!S*> 



(Country) 
(DEI^) 



(Country) 
(DBA) 



(implication No.) 



(Filing Date) 



P CTlBBfflBfcW3ft<e*lTV^JEV^J|*|=«^Ta, *0fcfriHfit0 

ZQJKH ^fflrtfflB B * fc tiP C TBBJgflH B h ®W<aftttmz X* 



n BFphniary 1999 
(Day/Month/Year Filed) 



0 7 February 200 0 
(Day/Month/Year Filed) 



(Day/Month/Year Filed) 



(Day/Month/Year Filed) 



(Day/Month/Year Filed) 



□ 
□ 
□ 
□ 
□ 
□ 



(Day/Month/Year Filed) 



I hereby claim the benefit under Title 35. United States Code, Section 
1 19(e) of any united States provisional appHcation(s) listed below. 



(Application No.) 
<ffiW#*> 



(Filing Date) 



I hereby claim the benefit under Title 35, United States Code, Section 
120 of any United States application(s), or 365© of any PCT 
international application designating the United States, listed below and. 
insofar as the subject matter of each of the claims of this application is 
not disclosed in the prior United States or PCT International application 
in the manner provided by the first paragraph of Title 35. United States 
Section 1 12, I acknowledge the duty to disclose information which is 
material to patentability as defined in Title 37, Code of Federal 
Regulations, Section 1.56 which became available between the filing 
date of the prior application and the national or PCT international filing 
date of application. 



(Application No.) 



(Filing Date) 



(Status: Patented, Pending, Abandoned) 
(88 *£) 



3 188*1 0 0 1 B&**:Ei&S* £L<ti*£>8;£ 

■f K 2: *B»tft J:T»KSfcfttjTfc*ifc£ t tcteK*-*-*. 



I hereby declare that all statements made herein of my own 
knowledge are true and that all statements made on information 
and belief are believed to be true; and further that these 
statements were made with the knowledge that willful false 
statements and the like so made are punishable by fine or 
imprisonment, or both, under Section 1001 of Title 18 of the 
United States Code and that such willful false statements may 
jeopardize the validity of the application or any patent issued 
thereon. t » 
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POWER OF ATTORNEY: As a named inventor, I hereby appoint 
the following attorney(s) and/or agent(s) to prosecute this application 
and transact al business in the Patent and Trademark Office 
connected therewith (list name and registration number) 

WILLIAM S. FROMMER, Registration No. ,25,506 an d 
'N DENNIS M. SMID, Registration No. 34,930 , 

Send Correspondence to: 

c /o FROM M ER LAWRENCE & HAUG LLP 

New York, New Yor k 10151 



Direct Telephone Calls to: 
(212) 588-0800 
to the attention of: 
WILLIAM S. FROMMER 



Full name of sole or first inventor 
Tomovuki ASANO 



inventor s signaiure 



tesidencej 



Pfesidenc^ 
Kanagawa, Japan 



Date 



"'Citizenship 
Japan 



Post Office Address 

c/o Sony Corporation, 7-35, Kitashdnagawa 6-chome, 
Shinagawa-ku, Tokyo 141-0001 Japan 



full name of second joint inventor, if any 
' Yoshitcro OSAWA 



Secono^Inventor's signature 



Date 




""Citizenship 
Japan 



Post Office Address 

c/o Sony Corporation, 7-35, Kitashdnagawa 6-chome, 
Shinagawa-ku, Tokyo 141-0001 Japan 



(Supply similar information and signature for third and subsequent 
joint inventors) 
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